How do I prevent players from ban evading, are there any tips and tricks?
I currently use GetPlayerIdentifiers and GetPlayerToken, but I noticed that players use ways to change their Hardware IDs and these Identifiers, they either request new IP from their ISP, then change the other identifiers and then they change the hardware IDs and continue to break our rules. I am wondering what techniques I could use or others in my situation.
That (Identifiers and the Token) is about all you can do, sadly - IPs are mostly dynamic nowadays so it’s pointless, identifiers aren’t as easy to change but still possible
I haven’t tested it yet but isn’t it possible for browser/NUI fingerprinting like getting the devices fonts, hardware concurrency (to my knowledge getplayertoken() already uses it), and other, but FiveM is running in a sandboxed environment so I am unsure if that would work.
I wouldn’t rely on fingerprinting, beyond being unreliable in most ways (even, say, HTML canvas data - which is one of the best fingerprinting vectors - by itself is pretty much useless unless you’re lucky) it’s also hard to execute properly and raises other concerns. And yes, FiveM is running sandboxed and they’ve made it even more sandboxed recently
Long story short, just rely on using identifiers and the player token for this stuff, as well as other means - whitelisting, applications, all the usual
You could do a form of allowlist wherein you require users to be in your Discord in order to connect to the server, keep in mind to require them a specific role and not just when they join your discord with a member role, because it’s easy to change your IP, create a new discord account & join.
I was going to ask this on another thread, but fk it:
Is there a way to temporarily halt a player joining and present a ‘challenge’ of some sort prior to joining?
Similar to the way a deferral would work?
I’m curious if there’s a way to Enforce identity prior to joining the server? That would help alot with player management…just curious of course;
Literally use the deferral system with custom logic (however you see fit), there’s nothing else for this kind of stuff